EPI Data Centre Foundation cheat sheet
EPI Data Centre Foundation · Keep the key ideas within reach.
Data Centre Governance, Risk and Professional Competence
Risk = likelihood × impact; treatment options are avoid, reduce, transfer (insurance/contract), or accept with documented owner sign-off.
Risk register minimum fields: description, owner, likelihood, impact, rating, treatment, target date, and residual rating.
Governance structure: an accountable owner (single point of accountability) plus delegated operational authority; RACI clarifies who is Responsible, Accountable, Consulted, Informed.
Business impact analysis sets RTO (time to restore) and RPO (acceptable data loss); technical DR design must meet both.
Vendor management: due diligence before contract, defined SLAs with credits, right-to-audit clause, and periodic performance review.
Professional competence: competence records should show training, assessment, and supervised practice, not attendance alone.
Ethical duty: report safety or compliance breaches through defined channels; falsifying maintenance or test records is a disciplinary and legal matter.
KPIs vs KRIs: KPIs measure performance (PUE, availability); KRIs measure risk exposure (open critical findings, overdue maintenance).